@skyhook-io/radar-app 1.16.3 → 1.17.1

package/README.md

@@ -10,7 +10,7 @@ This package is source-only — it ships TypeScript + TSX files under `src/`. Co
 npm install @skyhook-io/radar-app
 ```
 
-Peer deps: `react >=19`, `react-dom >=19`, `react-router-dom >=7`, `@tanstack/react-query >=5`, `@skyhook-io/k8s-ui >=1.5.0`, plus `clsx`, `tailwind-merge`, `lucide-react`, `@xyflow/react`, `elkjs`.
+Peer deps: `react >=19`, `react-dom >=19`, `react-router-dom >=7`, `@tanstack/react-query >=5`, `@skyhook-io/k8s-ui >=1.17.1`, plus `clsx`, `tailwind-merge`, `lucide-react`, `@xyflow/react`, `elkjs`.
 
 ## Use
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skyhook-io/radar-app",
-  "version": "1.16.3",
+  "version": "1.17.1",
   "description": "Radar's full web UI as a reusable React component. Used by Radar's own binary and by external consumers like Radar Cloud.",
   "repository": {
     "type": "git",
@@ -34,7 +34,7 @@
     "@fontsource/dm-mono": "^5.3.0",
     "@monaco-editor/react": "^4.7.0",
     "diff": "^9.0.0",
-    "monaco-editor": "0.55.1",
+    "monaco-editor": "0.57.0",
     "react-markdown": "^10.1.0",
     "react-virtuoso": "^4.18.16",
     "remark-gfm": "^4.0.1",
@@ -42,7 +42,7 @@
     "yaml": "^2.9.0"
   },
   "peerDependencies": {
-    "@skyhook-io/k8s-ui": ">=1.16.3",
+    "@skyhook-io/k8s-ui": ">=1.17.1",
     "@tanstack/react-query": ">=5",
     "@xyflow/react": ">=12.0.0",
     "clsx": ">=2",

package/src/App.tsx

@@ -1,4 +1,4 @@
-import { useState, useEffect, useCallback, useMemo, useRef } from 'react'
+import { useState, useEffect, useLayoutEffect, useCallback, useMemo, useRef } from 'react'
 import { flushSync } from 'react-dom'
 import { startViewTransitionSafe } from '@skyhook-io/k8s-ui/utils/view-transition'
 import { englishPlural } from '@skyhook-io/k8s-ui/utils/pluralize'
@@ -10,7 +10,7 @@ import { GlobalDiagnoseButton } from './components/diagnose/LocalDiagnoseAction'
 import { investigationWorkspaceSearch, isInvestigationWorkspacePath, useDiagnoseLayout } from './components/diagnose/DiagnoseContext'
 import { DiagnoseSurface } from './components/diagnose/DiagnoseSurface'
 import { TopologyGraph, TopologySearch, TopologyBreadcrumb, TopologyFilterSidebar, TopologyControls, FreshnessControl, gitOpsRouteForKind, gitOpsRouteForResource, ScopePill, PaneLoader } from '@skyhook-io/k8s-ui'
-import { initNavigationMap } from '@skyhook-io/k8s-ui/utils/navigation'
+import { resetNavigationMap } from '@skyhook-io/k8s-ui/utils/navigation'
 import { topologyNodeResourceKind } from '@skyhook-io/k8s-ui/utils/topology-neighborhood'
 import { useAPIResources, findAPIResourceForRoute } from './api/apiResources'
 import { TimelineView } from './components/timeline/TimelineView'
@@ -23,7 +23,6 @@ import { HelmView } from './components/helm/HelmView'
 import { HelmCompareRoute } from './components/helm/HelmCompareRoute'
 import { TrafficView } from './components/traffic/TrafficView'
 import { CostView } from './components/cost/CostView'
-import { CapacityView } from './components/capacity/CapacityView'
 import { AuditView } from './components/audit/AuditView'
 import { IssuesPane } from './components/issues/IssuesPane'
 import { GitOpsView } from './components/gitops/GitOpsView'
@@ -38,9 +37,10 @@ import { CloudFunnelButton } from './components/CloudFunnelButton'
 import { useNavCustomization } from './context/NavCustomization'
 import type { FleetTakeoverTarget } from './context/NavCustomization'
 import { PrimaryNavRail } from './components/nav/PrimaryNavRail'
-import { CNPGView } from './components/cnpg/CNPGView'
-import { CNPG_SCREENS, cnpgDetailKindFor, cnpgDetailPath, parseCNPGRoute } from './components/cnpg/routes'
-import { currentPageLabel } from './components/cnpg/paths'
+import { resourceExpandedPath, resourceKindListTitle } from './integrations/resourceHosts'
+import { workspaceContextSwitchSearch, workspaceForPath, workspaceForView, workspaceLabels } from './integrations/workspaceRoutes'
+import { WorkspaceScreen } from './integrations/workspaceScreens'
+import { currentPageLabel } from './utils/page-links'
 import { navigateFromPrimaryRail } from './components/nav/navigation'
 import { useNavRailPinned } from './hooks/useNavRailPinned'
 import { useMediaQuery } from './hooks/useMediaQuery'
@@ -58,12 +58,12 @@ import { openWhatsNew, useWhatsNewStatus, WhatsNew } from './components/whats-ne
 import { useUsageData, useUsageRecording } from './api/usage-data'
 import { UsageDataPrompt } from './components/usage-data/UsageDataPrompt'
 import { ShortcutHelpOverlay } from './components/ui/ShortcutHelpOverlay'
-import { DiagnosticsOverlay } from './components/ui/DiagnosticsOverlay'
+import { DiagnosticsOverlay, type DiagnosticsFocus } from './components/ui/DiagnosticsOverlay'
 import { useEventSource } from './hooks/useEventSource'
-import { debugNamespaceLog, useNamespaces, useNamespaceScope, useSetActiveNamespace, useSwitchContext, useAuthMe, useAudit } from './api/client'
+import { debugNamespaceLog, refetchOnResourceEvents, resourceEventKey, useNamespaces, useNamespaceScope, useSetActiveNamespace, useSwitchContext, useAuthMe, useAudit, useClusterInfo } from './api/client'
 import { buildAuditSeverityMap } from './utils/auditBadges'
 import { isInNamespaceScope, scopeNodesToNamespaces } from './utils/topology-namespace'
-import { routePath, apiUrl, getAuthHeaders, getCredentialsMode, stripBasename } from './api/config'
+import { routePath, apiUrl, getApiBase, getAuthHeaders, getCredentialsMode, stripBasename } from './api/config'
 import { KeyboardShortcutProvider, useRegisterShortcut, useRegisterShortcuts, useSuppressBaseShortcuts } from './hooks/useKeyboardShortcuts'
 import { useAnimatedUnmount } from './hooks/useAnimatedUnmount'
 import { useDocumentTitle } from './hooks/useDocumentTitle'
@@ -75,7 +75,9 @@ import { Tooltip } from './components/ui/Tooltip'
 import { LargeClusterNamespacePicker } from './components/shared/LargeClusterNamespacePicker'
 import { SettingsDialog, type SettingsSectionId } from './components/settings/SettingsDialog'
 import type { APIResource, TopologyNode, GroupingMode, MainView, SelectedResource, SelectedHelmRelease, NodeKind, TopologyMode, Topology, K8sEvent } from './types'
-import { kindToPluralWithGroup, pluralToKind, openExternal, apiVersionToGroup, relatedResourcePath, searchHitToSelectedResource, withCrossViewParams } from './utils/navigation'
+import { createViewMemory } from './utils/viewMemory'
+import { createKindFilterStore } from './utils/kindFilterStore'
+import { kindToPluralWithGroup, pluralToKind, openExternal, apiVersionToGroup, relatedResourcePath, searchHitToSelectedResource, withCrossViewParams, writeViewParams, CROSS_VIEW_PARAMS } from './utils/navigation'
 import { findSelectedTopologyNode } from './utils/topology-selection'
 import { type OmnibarHandle } from './components/ui/Omnibar'
 import { RadarOmnibar } from './components/ui/RadarOmnibar'
@@ -83,7 +85,7 @@ import type { ContextSwitcherHandle } from './components/ContextSwitcher'
 
 // All possible node kinds (core + GitOps)
 const ALL_NODE_KINDS: NodeKind[] = [
-  'Internet', 'Ingress', 'Gateway', 'HTTPRoute', 'GRPCRoute', 'TCPRoute', 'TLSRoute',
+  'Internet', 'Ingress', 'Gateway', 'HTTPRoute', 'GRPCRoute', 'TCPRoute', 'TLSRoute', 'UDPRoute',
   'Service', 'Deployment', 'Rollout', 'DaemonSet', 'StatefulSet',
   'ReplicaSet', 'Pod', 'PodGroup', 'ConfigMap', 'Secret', 'ServiceAccount', 'SealedSecret', 'ServiceMonitor', 'PodMonitor', 'HorizontalPodAutoscaler', 'Job', 'CronJob', 'PersistentVolumeClaim', 'Namespace',
   'Application', 'Kustomization', 'HelmRelease', 'GitRepository',
@@ -141,8 +143,8 @@ function getViewFromPath(pathname: string): ExtendedMainView {
   if (path === 'helm') return 'helm'
   if (path === 'traffic') return 'traffic'
   if (path === 'cost') return 'cost'
-  if (path === 'capacity') return 'capacity'
-  if (path === 'cnpg') return 'cnpg'
+  const workspace = workspaceForPath(pathname)
+  if (workspace) return workspace.id
   if (path === 'workload') return 'workload'
   if (path === 'checks' || path === 'audit') return 'checks'  // /audit = legacy → checks
   if (path === 'gitops') return 'gitops'
@@ -167,13 +169,14 @@ function usageView(pathname: string, view: ExtendedMainView, upgrade: boolean):
 
 // The screen a crash is counted under. Fixed names, because release builds
 // shorten component names and the component stack can't say which screen.
-const CRASH_LABELS: Record<ExtendedMainView, string> = {
+const CRASH_LABELS = {
   home: 'Home', topology: 'Topology', resources: 'Resources', timeline: 'Timeline',
   issues: 'Issues', helm: 'Helm', helmCompare: 'HelmCompare', traffic: 'Traffic',
-  cost: 'Cost', capacity: 'Capacity', cnpg: 'CloudNativePG', checks: 'Checks', gitops: 'GitOps',
+  cost: 'Cost', checks: 'Checks', gitops: 'GitOps',
   applications: 'Applications', workload: 'Workload', compare: 'Compare',
   investigations: 'Investigations',
-}
+  ...workspaceLabels,
+} satisfies Record<ExtendedMainView, string>
 
 // The namespace scope filter is meaningful only on namespaced surfaces. On
 // cluster-scoped views it does nothing, so we disable it with an explanation
@@ -203,12 +206,8 @@ function namespaceFilterDisabled(
       tooltip: 'Cost is reported per namespace across the whole cluster — the namespace filter doesn’t apply here.',
     }
   }
-  if (view === 'capacity') {
-    return {
-      disabled: true,
-      tooltip: 'Capacity is reported across the cluster — the namespace filter doesn’t apply here.',
-    }
-  }
+  const workspace = workspaceForView(view)
+  if (workspace?.namespaceScope === 'cluster') return { disabled: true, tooltip: workspace.namespaceFilterTooltip }
   if (view === 'checks' && pathname.startsWith('/checks/upgrade')) {
     return {
       disabled: true,
@@ -263,6 +262,8 @@ function radarPageTitle(pathname: string, search = '', apiResources?: APIResourc
     const resourceName = decode(pathSegments[1] ?? '')
     if (!resourceName) return 'Resources'
     const group = new URLSearchParams(search).get('apiGroup') || ''
+    const hostTitle = resourceKindListTitle({ name: resourceName, group })
+    if (hostTitle) return hostTitle
     const match = findAPIResourceForRoute(apiResources, resourceName, group)
     return pluralKindTitle(match?.kind ?? pluralToKind(resourceName), resourceName)
   }
@@ -281,18 +282,8 @@ function radarPageTitle(pathname: string, search = '', apiResources?: APIResourc
   if (view === 'checks' && pathSegments[1] === 'upgrade') return 'Upgrade impact'
 
   // The landing view reads "Overview" rather than "Home" in the tab.
-  if (view === 'capacity') {
-    if (pathSegments[1] === 'pools') return decode(pathSegments[2] ?? '') || 'Capacity'
-    if (pathSegments[1] === 'demand') return 'Capacity Demand'
-    if (pathSegments[1] === 'activity') return 'Capacity Activity'
-  }
-
-  if (view === 'cnpg') {
-    const route = parseCNPGRoute(pathname)
-    if (route.detail) return route.detail.name
-    const screen = CNPG_SCREENS.find((s) => s.id === route.screen)
-    return `CloudNativePG ${screen?.label ?? 'Overview'}`
-  }
+  const workspace = workspaceForView(view)
+  if (workspace) return workspace.pageTitle(pathname)
   if (view === 'home') return 'Overview'
   // Every other view's label is its id capitalized — getViewFromPath has already
   // normalized aliases (e.g. /audit → 'checks'), so no lookup table is needed.
@@ -351,6 +342,7 @@ interface AppProps {
 }
 
 function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterLoadStateChange }: AppProps) {
+  useLayoutEffect(() => () => resetNavigationMap(), [])
   const navigate = useNavigate()
   const location = useLocation()
   const navigationType = useNavigationType()
@@ -452,6 +444,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
 
   // Get mainView from URL path
   const mainView = getViewFromPath(location.pathname)
+  const activeWorkspace = workspaceForView(mainView)
   const upgradeReadinessRoute = location.pathname.startsWith('/checks/upgrade')
 
   // Opt-in usage data. Embedded hosts own their own consent, so Radar never asks there.
@@ -459,12 +452,8 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
   // A status cached by another screen must not start recording inside a host.
   useUsageRecording(usageView(location.pathname, mainView, upgradeReadinessRoute), navCustomization.embedded ? undefined : usageData.data)
 
-  // Initialize the kind→plural discovery map app-wide (not just on ResourcesView
-  // mount) so the omnibar can open a CRD hit with an irregular plural from any
-  // view — kindToPlural would otherwise English-guess the route before a
-  // resources view has run initNavigationMap().
+  // The omnibar needs discovered plurals even before ResourcesView mounts.
   const { data: navApiResources } = useAPIResources()
-  useEffect(() => { if (navApiResources) initNavigationMap(navApiResources) }, [navApiResources])
 
   // View-aware namespace scope: disabled on cluster-scoped surfaces so the
   // chip isn't a dead control next to the cluster switcher.
@@ -482,15 +471,45 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     return slug || 'pods'
   }, [location.pathname])
 
-  // Canonical URL — `/resources` is not stable for bookmarks/sharing; normalize to `/resources/pods`.
+  // Section memory and Resources filters are kept per cluster; inert until the context is known.
+  const { data: clusterInfoData, isLoading: clusterInfoLoading } = useClusterInfo()
+  const clusterContext = clusterInfoData?.context
+  const viewMemory = useMemo(
+    () => (clusterContext ? createViewMemory(`${getApiBase()}|${clusterContext}`) : undefined),
+    [clusterContext],
+  )
+  const kindFilterStore = useMemo(
+    () => (clusterContext ? createKindFilterStore(`${getApiBase()}|${clusterContext}`) : undefined),
+    [clusterContext],
+  )
+  useEffect(() => {
+    viewMemory?.record(mainView, location.pathname, location.search)
+    if (mainView === 'resources') kindFilterStore?.recordLastKind(location.pathname, location.search)
+  }, [viewMemory, kindFilterStore, mainView, location.pathname, location.search])
+  const rememberedKindSearch = useMemo(
+    () => kindFilterStore && ((kind: { name: string; group: string }) => kindFilterStore.get(kind.name, kind.group)),
+    [kindFilterStore],
+  )
+  const saveKindFilters = useMemo(
+    () => kindFilterStore && ((kind: { name: string; group: string }, search: string) => kindFilterStore.set(kind.name, kind.group, search)),
+    [kindFilterStore],
+  )
+
+  // Canonical URL — `/resources` is not stable for bookmarks/sharing; normalize to
+  // the last kind (hosts such as Radar Hub link to bare `/resources`), else Pods.
   useEffect(() => {
     const path = location.pathname.replace(/\/+$/, '') || '/'
-    if (path !== '/resources') return
+    // Wait for the cluster so its last kind can be read; landing on Pods first would overwrite it.
+    if (path !== '/resources' || clusterInfoLoading) return
+    const current = new URLSearchParams(location.search)
+    const onlyCrossView = [...current.keys()].every(key => (CROSS_VIEW_PARAMS as readonly string[]).includes(key))
+    const destination = new URL((onlyCrossView && kindFilterStore?.lastKind()) || '/resources/pods', 'http://radar.invalid')
+    current.forEach((value, key) => destination.searchParams.set(key, value))
     navigate(
-      { pathname: '/resources/pods', search: location.search, hash: location.hash },
+      { pathname: destination.pathname, search: destination.search, hash: location.hash },
       { replace: true },
     )
-  }, [location.pathname, location.search, location.hash, navigate])
+  }, [location.pathname, location.search, location.hash, navigate, kindFilterStore, clusterInfoLoading])
 
   // Set mainView by navigating to the path
   const setMainView = useCallback((view: ExtendedMainView, params?: Record<string, string>) => {
@@ -508,6 +527,15 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       }
     }
 
+    // Explicit params are a link with its own state; otherwise go back to where the user left this section.
+    const remembered = params
+      ? undefined
+      : viewMemory?.sectionPath(view) ?? (view === 'resources' ? kindFilterStore?.lastKind() : undefined)
+    if (remembered) {
+      navigate(withCrossViewParams(remembered, location.search))
+      return
+    }
+
     const path = view === 'home' ? '/' : `/${view}`
 
     // Start fresh — keep only cross-view params, discard view-specific ones.
@@ -532,7 +560,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     }
 
     navigate({ pathname: path, search: newParams.toString() })
-  }, [location.search, navigate, takeover, goHost])
+  }, [location.search, navigate, takeover, goHost, viewMemory, kindFilterStore])
 
   const whatsNewStatus = useWhatsNewStatus()
 
@@ -637,6 +665,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
 
   // Diagnostics overlay state
   const [showDiagnostics, setShowDiagnostics] = useState(false)
+  const [diagnosticsFocus, setDiagnosticsFocus] = useState<DiagnosticsFocus>()
 
   // The peek drawer "expanded" into a fullscreen overlay = ?full=1 with a selected
   // resource, on ANY view (resources list, topology graph, GitOps, Applications…) —
@@ -953,7 +982,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       category: 'General' as const,
       scope: 'global' as const,
       allowInInputs: true,
-      handler: () => setShowDiagnostics(prev => !prev),
+      handler: () => { setDiagnosticsFocus(undefined); setShowDiagnostics(prev => !prev) },
     },
     // Settings exposes local-binary controls that don't apply to embedded hosts.
     // Register the shortcut only when standalone (matching the gear button) —
@@ -1069,12 +1098,13 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
   //     update that arrived *after* the fast structural flush already ran.
   const fastInvalidationRef = useRef<{
     changedKinds: Set<string>   // every changed kind (any op) → detail drawer
+    changedObjects: Set<string> // resourceEventKey of every event → detail views that got a 404
     structuralKinds: Set<string> // add/delete kinds → list membership + counts + dashboard
     environmentNamespaces: Set<string>
     environmentPods: Map<string, Set<string>>
     secretsChanged: boolean
     timer: number | null
-  }>({ changedKinds: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null })
+  }>({ changedKinds: new Set(), changedObjects: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null })
   const cnpgInvalidationPendingRef = useRef(false)
   const slowInvalidationRef = useRef<{
     updatedKinds: Set<string>    // update-only churn → throttled list + dashboard
@@ -1111,6 +1141,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
 
     const fast = fastInvalidationRef.current
     fast.changedKinds.add(kind)
+    fast.changedObjects.add(resourceEventKey(kind, event.namespace ?? '', event.name))
     if (structural) fast.structuralKinds.add(kind)
     if (kind === 'secrets') fast.secretsChanged = true
     if ((kind === 'configmaps' || kind === 'secrets') && event.namespace) fast.environmentNamespaces.add(event.namespace)
@@ -1128,7 +1159,12 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       fast.timer = window.setTimeout(() => {
         const f = fastInvalidationRef.current
         for (const k of f.changedKinds) {
-          queryClient.invalidateQueries({ queryKey: ['resource', k] }) // open detail drawer stays live
+          // Open detail drawers stay live; a deleted one is left alone unless
+          // an event names it.
+          queryClient.invalidateQueries({
+            queryKey: ['resource', k],
+            predicate: (q) => refetchOnResourceEvents(q, k, f.changedObjects),
+          })
         }
         for (const k of f.structuralKinds) {
           queryClient.invalidateQueries({ queryKey: ['resources', k] }) // list membership changed
@@ -1156,7 +1192,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           cnpgInvalidationPendingRef.current = false
           queryClient.invalidateQueries({ queryKey: ['cnpg', 'workspace'] })
         }
-        fastInvalidationRef.current = { changedKinds: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
+        fastInvalidationRef.current = { changedKinds: new Set(), changedObjects: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
       }, 3000)
     }
 
@@ -1185,7 +1221,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     if (fastInvalidationRef.current.timer !== null) clearTimeout(fastInvalidationRef.current.timer)
     if (slowInvalidationRef.current.timer !== null) clearTimeout(slowInvalidationRef.current.timer)
     if (timelineInvalidationRef.current.timer !== null) clearTimeout(timelineInvalidationRef.current.timer)
-    fastInvalidationRef.current = { changedKinds: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
+    fastInvalidationRef.current = { changedKinds: new Set(), changedObjects: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
     slowInvalidationRef.current = { updatedKinds: new Set(), timer: null }
     timelineInvalidationRef.current = { timer: null }
   }, [])
@@ -1198,6 +1234,8 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     onContextSwitchComplete: endSwitch,
     onContextSwitchProgress: updateProgress,
     onContextChanged: (context) => {
+      resetNavigationMap()
+
       // Clear all React Query caches when cluster context changes
       // This ensures helm releases, resources, etc. are refetched from the new cluster
       // removeQueries clears cached data, invalidateQueries triggers refetch
@@ -1208,7 +1246,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       if (fastInvalidationRef.current.timer !== null) clearTimeout(fastInvalidationRef.current.timer)
       if (slowInvalidationRef.current.timer !== null) clearTimeout(slowInvalidationRef.current.timer)
       if (timelineInvalidationRef.current.timer !== null) clearTimeout(timelineInvalidationRef.current.timer)
-      fastInvalidationRef.current = { changedKinds: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
+      fastInvalidationRef.current = { changedKinds: new Set(), changedObjects: new Set(), structuralKinds: new Set(), environmentNamespaces: new Set(), environmentPods: new Map(), secretsChanged: false, timer: null }
       slowInvalidationRef.current = { updatedKinds: new Set(), timer: null }
       timelineInvalidationRef.current = { timer: null }
 
@@ -1241,10 +1279,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
         const nextParams = new URLSearchParams()
         const diagnoseRun = new URLSearchParams(location.search).get('ai-run')
         if (diagnoseRun) nextParams.set('ai-run', diagnoseRun)
-        // A CNPG detail keeps the context it belongs to, so it can say it is
-        // not in the new one instead of loading a same-named object.
-        const pinnedCtx = new URLSearchParams(location.search).get('ctx')
-        if (pinnedCtx && location.pathname.startsWith('/cnpg/')) nextParams.set('ctx', pinnedCtx)
+        for (const [key, value] of workspaceContextSwitchSearch(location.pathname, new URLSearchParams(location.search))) nextParams.set(key, value)
         navigate(
           { pathname: location.pathname, search: nextParams.toString() },
           { replace: true, state: location.state },
@@ -1425,6 +1460,34 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       { onSuccess: () => setNamespaces([]) },
     )
   }, [namespaceScope?.cacheScoped, namespaces.length, setActiveNamespace])
+  // Same write as the header picker, which then mirrors it into `namespaces`.
+  // The flash shows where that scope lives from now on. The picker owns the
+  // namespace scope from then on, so no kind keeps a Namespace column filter.
+  const [namespacePickerFlash, setNamespacePickerFlash] = useState(0)
+  const applyNamespacesToAllSections = useCallback(
+    (picked: string[]) => setActiveNamespace.mutateAsync({ namespaces: picked }).then(() => {
+      kindFilterStore?.clearColumn('namespace')
+      setNamespacePickerFlash(n => n + 1)
+    }),
+    [setActiveNamespace, kindFilterStore],
+  )
+  const issuesShowNamespace = useMemo(() => {
+    if (namespaceScope?.cacheScoped) {
+      if (!namespaceScope.namespaceRescope) return undefined
+      return {
+        mode: 'switch' as const,
+        show: (ns: string) => { setNamespaces([ns]); setActiveNamespace.mutate({ namespaces: [ns] }) },
+      }
+    }
+    return {
+      mode: 'add' as const,
+      show: (ns: string) => {
+        const next = namespaces.includes(ns) ? namespaces : [...namespaces, ns]
+        setNamespaces(next)
+        setActiveNamespace.mutate({ namespaces: next })
+      },
+    }
+  }, [namespaceScope?.cacheScoped, namespaceScope?.namespaceRescope, namespaces, setActiveNamespace])
   const initialBookmarkReconciledRef = useRef(false)
   const scopeActives = useMemo(() => namespaceScope?.actives ?? [], [namespaceScope?.actives])
   const namespaceScopeKey = useMemo(() => namespaceScope ? [...scopeActives].sort().join(',') : null, [namespaceScope, scopeActives])
@@ -1503,32 +1566,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     if (skipUrlWriteAfterPopRef.current) return
     const currentSearch = window.location.search
     const params = new URLSearchParams(currentSearch)
-
-    // Update namespaces param
-    if (namespaces.length > 0) {
-      params.set('namespaces', namespaces.join(','))
-    } else {
-      params.delete('namespaces')
-    }
-    // Remove legacy 'namespace' param if present
-    params.delete('namespace')
-
-    // Topology-specific params: only set when on topology view, clean up otherwise
-    if (mainView === 'topology') {
-      if (topologyMode !== 'resources') {
-        params.set('mode', topologyMode)
-      } else {
-        params.delete('mode')
-      }
-      if (groupingMode !== 'none' && (namespaces.length === 0 || groupingMode !== 'namespace')) {
-        params.set('group', groupingMode)
-      } else {
-        params.delete('group')
-      }
-    } else {
-      params.delete('mode')
-      params.delete('group')
-    }
+    writeViewParams(params, namespaces, mainView === 'topology' ? { mode: topologyMode, grouping: groupingMode } : null)
 
     // Only update if params actually changed vs current URL
     if (params.toString() !== new URLSearchParams(currentSearch).toString()) {
@@ -1771,7 +1809,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
     setVisibleKinds(new Set())
   }, [])
 
-  const navActiveView = mainView === 'helmCompare' ? 'helm' : mainView === 'cnpg' ? 'resources' : mainView
+  const navActiveView = mainView === 'helmCompare' ? 'helm' : activeWorkspace?.navView ?? mainView
 
   return (
     <PortForwardProvider>
@@ -1814,7 +1852,9 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
             <ScopePill>
               <ContextSwitcher ref={contextSwitcherRef} variant="segment" />
               <NamespaceSwitcher
+                key={namespacePickerFlash}
                 ref={namespaceSwitcherRef}
+                className={namespacePickerFlash ? 'reach-flash' : undefined}
                 variant="segment"
                 disabled={namespaceFilter.disabled}
                 disabledTooltip={namespaceFilter.tooltip}
@@ -2230,7 +2270,8 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
         )}
 
         {/* Resources view */}
-        {mainView === 'resources' && (
+        {/* Bare /resources waits for App's redirect to the last kind; mounted, the view would redirect to Pods first. */}
+        {mainView === 'resources' && (location.pathname.replace(/\/+$/, '') || '/') !== '/resources' && (
           <ResourcesView
             namespaces={namespaces}
             selectedResource={routeSelectedResource}
@@ -2238,6 +2279,11 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
             onResourceClickYaml={(res) => navigateToResource(res, 'yaml')}
             onKindChange={() => setSelectedResource(null)}
             onClearNamespaces={clearAllNamespaces}
+            rememberedKindSearch={rememberedKindSearch}
+            onKindFiltersChange={saveKindFilters}
+            // Embedded hosts own their namespace picker, and a cache-scoped
+            // Radar can't take an arbitrary set.
+            onApplyNamespacesToAllSections={namespaceScope?.cacheScoped || !kindFilterStore ? undefined : applyNamespacesToAllSections}
           />
         )}
 
@@ -2257,6 +2303,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
               setNamespaces([ns])
               setActiveNamespace.mutate({ namespaces: [ns] })
             }}
+            onOpenDiagnostics={() => { setDiagnosticsFocus('timeline'); setShowDiagnostics(true) }}
           />
         )}
 
@@ -2313,7 +2360,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
 
         {/* Traffic view */}
         {!viewsSyncGated && mainView === 'traffic' && (
-          <TrafficView namespaces={namespaces} />
+          <TrafficView namespaces={namespaces} onSetNamespaces={(ns) => { setNamespaces(ns); setActiveNamespace.mutate({ namespaces: ns }) }} />
         )}
 
         {/* Cost detail view */}
@@ -2321,12 +2368,9 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           <CostView namespaces={namespaces} onBack={() => setMainView('home')} onOpenResource={navigateToResource} />
         )}
 
-        {!viewsSyncGated && mainView === 'capacity' && (
-          <CapacityView onOpenResource={navigateToResource} />
-        )}
-
-        {!viewsSyncGated && mainView === 'cnpg' && (
-          <CNPGView
+        {!viewsSyncGated && activeWorkspace && (
+          <WorkspaceScreen
+            workspace={activeWorkspace}
             namespaces={namespaces}
             selectedResource={routeSelectedResource}
             onOpenResource={navigateToResource}
@@ -2365,6 +2409,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           <IssuesPane
             namespaces={namespaces}
             onNavigateToResource={navigateFromIssue}
+            showNamespace={issuesShowNamespace}
           />
         )}
 
@@ -2403,10 +2448,10 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
           onNavigate={(res) => navigateToResource(res)}
           canCollapseToDrawer={!isMobile}
           onExpand={(res, opts) => {
-            const cnpgPlural = cnpgDetailKindFor(res.kind, res.group)
-            if (cnpgPlural) {
+            const detailPath = resourceExpandedPath(res, connection.context || undefined, opts?.yaml ? 'yaml' : undefined)
+            if (detailPath) {
               navigate(
-                cnpgDetailPath({ plural: cnpgPlural, namespace: res.namespace, name: res.name }, connection.context || undefined, opts?.yaml ? 'yaml' : undefined),
+                detailPath,
                 { state: { returnLabel: currentPageLabel(), returnCtx: connection.context } },
               )
               return
@@ -2534,7 +2579,7 @@ function AppInner({ manageDocumentTitle = false, documentTitleSuffix, onClusterL
       {helpOverlay.shouldRender && <ShortcutHelpOverlay isOpen={helpOverlay.isOpen} onClose={() => setShowHelp(false)} currentView={mainView} />}
 
       {/* Diagnostics overlay */}
-      {diagnosticsOverlay.shouldRender && <DiagnosticsOverlay isOpen={diagnosticsOverlay.isOpen} onClose={() => setShowDiagnostics(false)} />}
+      {diagnosticsOverlay.shouldRender && <DiagnosticsOverlay isOpen={diagnosticsOverlay.isOpen} focus={diagnosticsFocus} onClose={() => { setShowDiagnostics(false); setDiagnosticsFocus(undefined) }} />}
 
       {/* Settings dialog — My permissions is rendered inline in its own section */}
       <SettingsDialog

package/src/RadarApp.tsx

@@ -46,6 +46,7 @@ import type {
 import type { ClusterLoadState } from "./types/clusterLoadState";
 import { TimelineSourceProvider } from "./context/TimelineSource";
 import type { TimelineSourceConfig } from "./api/timelineSource";
+import { TimelineRetentionNoteProvider } from "./context/TimelineCustomization";
 import { DiagnoseCustomizationProvider } from "./context/DiagnoseCustomization";
 import type {
   RenderDiagnoseAction,
@@ -180,6 +181,12 @@ export interface RadarAppProps {
    * React hook-order violation). Set it once at mount when possible.
    */
   timelineSource?: TimelineSourceConfig;
+  /**
+   * A note shown above the timeline and the Applications history, saying how
+   * far back history goes. Omitted → no note. Set it only when the timeline server
+   * actually limits history, or the note misstates what is shown.
+   */
+  timelineRetentionNote?: React.ReactNode;
 }
 
 // Default QueryClient with the same shape Radar's standalone binary uses.
@@ -236,6 +243,7 @@ export function RadarApp({
   onClusterLoadStateChange,
   onInvestigationFocus,
   timelineSource,
+  timelineRetentionNote,
 }: RadarAppProps): React.ReactElement {
   // Apply runtime config during render so module-level singletons are set
   // before children construct URLs. getApiBase() / getAuthHeaders() /
@@ -266,24 +274,26 @@ export function RadarApp({
             <RadarUpgradeHostProvider value={upgradeHost}>
               <FilterLocationBridge>
                 <TimelineSourceProvider config={timelineSource}>
-                  <DiagnoseCustomizationProvider
-                    value={renderDiagnoseAction ?? defaultDiagnoseAction}
-                    consentCopy={diagnoseConsent}
-                    renderRunActions={renderInvestigationRunActions}
-                    renderRefusalAction={renderInvestigationRefusalAction}
-                  >
-                    <DiagnoseProvider
-                      browserURLState={router !== "memory"}
-                      forceRouterURLState={router === "memory"}
-                      onFocusedRun={onInvestigationFocus}
+                  <TimelineRetentionNoteProvider value={timelineRetentionNote}>
+                    <DiagnoseCustomizationProvider
+                      value={renderDiagnoseAction ?? defaultDiagnoseAction}
+                      consentCopy={diagnoseConsent}
+                      renderRunActions={renderInvestigationRunActions}
+                      renderRefusalAction={renderInvestigationRefusalAction}
                     >
-                      <App
-                        manageDocumentTitle={manageDocumentTitle}
-                        documentTitleSuffix={documentTitleSuffix}
-                        onClusterLoadStateChange={onClusterLoadStateChange}
-                      />
-                    </DiagnoseProvider>
-                  </DiagnoseCustomizationProvider>
+                      <DiagnoseProvider
+                        browserURLState={router !== "memory"}
+                        forceRouterURLState={router === "memory"}
+                        onFocusedRun={onInvestigationFocus}
+                      >
+                        <App
+                          manageDocumentTitle={manageDocumentTitle}
+                          documentTitleSuffix={documentTitleSuffix}
+                          onClusterLoadStateChange={onClusterLoadStateChange}
+                        />
+                      </DiagnoseProvider>
+                    </DiagnoseCustomizationProvider>
+                  </TimelineRetentionNoteProvider>
                 </TimelineSourceProvider>
               </FilterLocationBridge>
             </RadarUpgradeHostProvider>